Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
File:                     UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json)
Hash identifier:          Ke+SwXdZjTHaebqwOjukBwI5BRRYZnqjzX0hMGp2YKY=
Subject key identifier:   48:40:EA:87:33:AF:68:17:E2:DB:05:57:23:20:68:3B:90:3F:3C:2A
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       01962ECFD7620276AA64F5BFF27CF468DDA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
Manifest number:          1165
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: 1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa (hash: fqVefE6RlaYUPduGoWsI2YNic7R0MJ4+DTDKQ/JK4rc=)
                          2: 1-FdAmS5arjzjLAT6dSpDv5Zz5Yo.roa (hash: 5R9Ps8+XKEvJyKNmQySRtdXFtn/oxvTrhdjJdae+0Mc=)
                          3: 3zDvKjYX5qyyRWMCbEyCJb1whcI.roa (hash: UgMcPhJl2XRyl5iipWHUcO/ZAIUXrG8hPqC4bk4RBnI=)
                          4: 7lxVna_a0xg23I1zjghxq6R0RXo.roa (hash: tXqQs9pDj0utpLVKfAdmZ32ratdKDLdXwvY9QAYFHbQ=)
                          5: 8neCxhaAsYaJYU9S15NmrANTFco.roa (hash: 4Xxa8uO6V7yLYBbylJYWkJX0nrzIRa0JN8AeDSSd+ak=)
                          6: 9FsdwBHHKhrqFudA3k7oZL7r4Q4.roa (hash: uRZsjNPkJy3rziszRje5Wynzc2FpiFWCTrsptTM+nWo=)
                          7: G71A0KnC09evxucNClMqoIzm0gk.roa (hash: xmVP8Or773i49cOPEZFSShv2rrcCsXJL/4gK3rngMPc=)
                          8: J9EfRVewePQYGlLe8kNseKQHxJk.roa (hash: 9VVRmDPU/cfVWvE65Fl3QvG+s92pe334/sHSfdMSMFU=)
                          9: KiMYrb7_k5A1XChjZVkaZe03-J4.roa (hash: 30qTixTrPBopXsIzoLW1hBKkrCQ5vS3MAYgu2zCZ2kU=)
                          10: KpqhmDN4PwGeQOyx1F2chMnA50g.roa (hash: DNgLDFTg3cwMMhN86OnAoSqZ+ZXAhdxntU2zCCbmG4E=)
                          11: LouV9CNyeDg8LwFm0WQg3Epf8sM.roa (hash: riVTvdLY1eaWT/u45Jf1fSb9f2SlRG/qD/bZHRckGb8=)
                          12: TZnMCWCDD7gEt2iDrVgun6OOwPs.roa (hash: SXv2dOCtyEflvEs/51vkBcKAPnsJErnwyCUiGSJl1Gs=)
                          13: UJXvhibxw_8TtOKnD--xEYn-Zww.roa (hash: OjpDb9p6TT8FBXJ45Y7m0jK/9WUgig2slzPx0C3W9Ns=)
                          14: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: TxSgd8UC3FRadkVdkpi6CIwc31rrtCNgvgjOHpg0tS0=)
                          15: UqRTo9zfPVco3yYn5nw6sqcSIPY.roa (hash: /Dt51aOP8kus3h99adWYkONhAkJ+yJWSL0c8KmtagW0=)
                          16: VnKbkzMWAdNyZPCEQCwxH17zOTU.roa (hash: M1ZyqSf62mnrFwNeiW1+tjvlZxQ3ALH4X2u5wgU4NPE=)
                          17: Xmv46alzrB60JmjVYvB6COzgMjA.roa (hash: hA/zNdXVXqQjvFAUICGet5aUd1QUuqsgENdS1uEiVVY=)
                          18: ce8k7XCQyghvYHchvwALfCrVJwg.roa (hash: yQNx287pWR7HRDZfUEYypC3YO0EWbPD76GUoO2g6XzE=)
                          19: dK1BXPCUXOQRT5oOEUWvGxP9gQk.roa (hash: Ys5B95zExSqqxQNADZXH3Qy0NLQy7XLhKxBDY3n6xFE=)
                          20: g6O7wY63DyqDJHy27Gz3lHDxU5s.roa (hash: TrqIQ8Zbcjz8fNMvr1JTBGMIwXO8B6vc4Pif/pzevVU=)
                          21: j-nqL0xN6WbmkmqvTYJrSA6qGCQ.roa (hash: Qw7R/IgYTVpT3XgGSpkjT+8JID4fe8wv1odGKPFhq/M=)
                          22: jDWhRAsVH-ADWO3fPKwaSwkr-tc.roa (hash: Sroyv7+ckh5jogjuhwtX2u83187uWC92R69FscJrG3U=)
                          23: jdQZdakevZhVtKrglfN2RFnzQcI.roa (hash: YWgCWrFOGK/KKipBlp5lhfep+s/kMG6GomEIbVictxA=)
                          24: mI-_CctqZI0K2tk6hRHxlecB4_0.roa (hash: L5SL5l2FWo7G2VvQUQ1QwP0hC9pB98xkcansR+H3uHU=)
                          25: ry5QBM2Eu4QVa3IbvVInNcRx-ao.roa (hash: mo2V1hYGi7uA3mmFMMTCShk3qAC1sKE08+9dYnb3F5w=)
                          26: yz5Oj1IRN47m7-hfoNRLKR-QsFQ.roa (hash: AJUnhFM68923GYadc3urgh5yRRol8KdV+S2IVDVlxow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d7:62:02:76:aa:64:f5:bf:f2:7c:f4:68:dd:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=4840ea8733af6817e2db05572320683b903f3c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b4:d9:ba:47:13:4e:aa:8e:57:9f:e3:22:6f:
                    6e:bf:d7:c3:4a:2b:0a:85:bf:8d:25:be:b8:d4:d9:
                    bc:17:e9:6f:0d:60:86:86:65:9a:be:d6:76:9a:20:
                    65:8a:40:f8:a0:61:3d:3e:d2:87:7a:f0:f5:0d:98:
                    ac:d6:bf:86:31:46:2f:b7:11:c6:74:ec:f3:e3:1d:
                    0a:0e:a1:81:0b:fa:35:f0:cd:ee:c4:0e:8c:51:47:
                    ce:e4:fe:4d:fd:b6:07:47:a0:c9:34:5c:7f:25:4b:
                    73:77:af:04:fe:3a:8e:38:ae:30:08:ea:43:47:d0:
                    28:11:bf:0a:3d:4a:a2:fb:f6:28:e2:05:7f:40:a3:
                    a6:0b:0c:8b:64:d0:61:8a:9c:ac:13:59:0b:83:91:
                    d6:92:e1:70:f5:1c:90:67:c0:9a:b4:3a:89:40:a5:
                    7e:05:83:b1:9e:e7:64:20:4b:0e:35:c8:05:a4:9e:
                    37:21:21:af:fa:10:d1:17:d5:ea:cd:a7:42:b8:f8:
                    f3:a0:47:74:64:fa:22:a8:cc:76:1b:54:d0:42:40:
                    34:47:ae:b3:61:e9:ce:0b:38:bd:b3:9f:48:e7:b3:
                    bf:d9:62:fa:05:17:35:11:19:3a:53:c5:45:c7:b4:
                    dc:9f:eb:05:90:1a:95:1e:34:1d:20:48:6f:c1:1f:
                    04:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:40:EA:87:33:AF:68:17:E2:DB:05:57:23:20:68:3B:90:3F:3C:2A
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d9:33:9e:ab:7a:97:b3:21:cf:a7:85:60:a1:bd:59:49:c9:
         64:dd:d5:3f:4b:e0:a1:03:49:25:69:ad:58:fa:97:66:b4:49:
         e2:27:6e:ce:dd:61:1b:0c:dc:2c:04:a8:e1:74:09:32:49:91:
         3a:62:64:9e:f8:ba:c7:15:cf:47:cc:cc:62:99:b3:d5:b8:24:
         1f:c6:45:c1:93:8c:09:8a:c7:1a:e4:2e:25:5e:e9:96:d3:37:
         fa:b2:da:ab:d0:81:71:36:ce:c0:85:46:9e:89:15:c7:8b:18:
         68:a1:00:2b:a7:7b:25:28:ef:08:85:ee:87:d8:81:d9:9b:98:
         bf:d3:7b:ce:a5:10:e1:c4:20:de:10:0f:e1:f1:57:3e:a0:15:
         92:25:8e:68:bc:55:50:64:8b:74:d3:33:eb:60:08:58:f9:3b:
         a8:eb:4a:ff:4e:72:c4:18:3a:90:62:a3:62:83:15:87:40:c3:
         57:a8:09:ee:e2:23:90:a5:b1:0d:c5:de:95:d3:e0:81:a8:72:
         a0:50:1e:78:1e:6d:2a:4a:4b:81:ab:31:37:50:a2:86:50:bd:
         b6:6e:5f:11:e0:98:ce:2a:02:69:90:43:f7:5e:2c:0c:03:d3:
         3e:ab:f8:97:4c:8d:f4:85:45:fa:24:d6:ac:b0:74:32:40:f3:
         ac:fc:d6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----